Daily IoCs for 2021-11-01

################################################################
#                     IOCs (@RedBeardIOCs)                     #
################################################################
#                                                              #
#     Date:    2021-11-01                                      #
#     Total:    216 samples                                    #
#     Stats:                                                   #
#              - AgentTesla: 38                                #
#              - AsyncRAT: 4                                   #
#              - AveMaria: 2                                   #
#              - Backstage: 13                                 #
#              - BillGates: 3                                  #
#              - BitCoin: 3                                    #
#              - Conti: 18                                     #
#              - Cryptbot: 4                                   #
#              - Cryptolocker: 15                              #
#              - DBatLoader: 2                                 #
#              - DCRat: 1                                      #
#              - Djvu: 5                                       #
#              - Dridex: 1                                     #
#              - FormBook: 13                                  #
#              - LockBit: 1                                    #
#              - Lokibot: 12                                   #
#              - Mirai: 9                                      #
#              - Nanocore: 7                                   #
#              - Neshta: 2                                     #
#              - Njrat: 1                                      #
#              - Qbot: 1                                       #
#              - Raccoon: 16                                   #
#              - RedLine: 33                                   #
#              - Remcos: 4                                     #
#              - Snake: 8                                      #
#                                                              #
################################################################


AgentTesla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AsyncRAT
f8909f2c8e09dc1c9e90136464eacbc834bde8837b69326de38a77299eb2e218
d486eaa1691486cbcc9a561efc4cfe7d07facb5c07c72d0b6876bee541d0668e
681c2c81570cb33d97f9ba7a1664ae55c681efb0d4b17bfcec93b542f3785ed5
fb75dd15765be010f34703f7c1da7762a790c69fe7f50017f698381dc21d75ac

AveMaria
9fc714ad9c5db38003fef656fb47efe9350184b7e39fa8e089e6b1fa5ba52cd3
413877dde2cff56ab605f7019e65ae9b8ca78fc9715e359d0838befa01a9ca3e

Backstage
0f3b5de344297356aba0082d0f9fab7326739610f982d72c70cccacd0eed8065
351007f46736dacb9089404b6a2ed8099345a28bc95ff2c7fcad38c05af70667
78f13098ba4b5a549483fad45ae6a30743747da5174d494a8c412441693d0778
64eab369a17ac181e0ce8236e1e971cec2fd07db21a28d220c6ed99ea34aed6c
943c31b5e7b530d05f0f867465f8a3d0fc47467fbaac4b6d7c08e96a965ce9d2
a154504b40ea514349c664078a9970f6721433792a3fd1a16b56a93d3313c268
b35753fa897199163bf3205b4eb934c379fb8844329b4eb20d960b0eda8a48a0
2c0ff564fce52035e637147fb6aaeed4ef47a8aa51dd70bdd33eeab33ffec099
c1deab06872502529f51206d579ff41c674cc993b02d8db5f5c57620ff202cb6
ef6eb1e6262d7449ee4b4973fc466357638870314b0a87020915ec5253f02bd6
e99b9bc72e89c2d22907ec12d2d7939ab4ff487630617e5560fedd89bb467685
54e9518e67e1c857e4fed1698539f196f4b41c9f4907ea9d00c082d858b9847f
eb30133620635e1f23173f3fedfb1dcfb8b25d1f3ce5c9eddac43ba46da36959

BillGates
37f8c63c18a2eb433646a006a77f2fb3ee17fc18efb3bcd7a865c16039d82384
e206dd002a594e557800e0de38fbbaf0e371a2604b75c85fd4afb57138851e2c
22d04f665519fd8091f873476b0b4be4ad02abe10c610b1f81611b7cc37d6146

BitCoin
0639465742c8fde38778bc1810b661bd94f16311c515c5bb6566a13da4f16347
3f455ca76b835252edbdf8af27c5065a4218fba19cb6392a319a4572658d846b
1b0c9f3f22d25cd518e480798ee44e8876107b2d37b2e92997c039d4a6c69db1

Conti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Cryptbot
b647a0f3607be1b72b22868b4968c25fd22398f6bf9b02a3b03dab08d20a8cc9
469cd2676ad7a10762002de7ab40f5b4403e83db0c76f2a88880b713107412c4
70d39658abb4c4bfbfaf3a44eb8f3c3408eb008628c15b8f8b8e91457a0479ee
b65b0ae08a0b84525ce65ea6ffa9f3cd3a0523b506135dacb1711b034bfb6f44

Cryptolocker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DBatLoader
d72799be34725e6cc9665e17895075ad8c5aa22835440abb4a342a202426379c
2f5de124217d49fb60e087bfe581f24765df94272544dc5b72ee7e5b35e243ba

DCRat
9c1a9ebd4c0a837d5676fae34653085e04688206e4e8f79d64f52a1cb39dc37c

Djvu
79cf5abc8cdb8d94194260a529c1817d4fc6185e4c8f8a37265156be92b975fd
232d646af94d07189dfc96bb4f8942f5a0a311245f10b177bf2c9ffb050cfe88
417865a8ebe0811732901239b279c7b5faa6fae695e6f2ddcd6adf87fd405324
c36edff872adc85d7d9577d2ecf910d08287519dd610c03388653f816471c7f6
c262de1eb2c0b91cd2f8c1e14ac1f29cc940c19de3cc8135dd4adb5386512bbb

Dridex
bb03d92acae8fb44b2d928b3b06ca4426c3a3fc895aeda1b2ce0361b4ee09ee9

FormBook
3c9984e534636c34f7a22ccbbfb1c06baa5a6f16883eb77a65ac615dffa24f16
fcd3b620d09a3268b7d58c23a46aaa8446c13e045ad99cf5c71eb2d811f3a61f
3ec2f28d45dd7b18d8bc6904112032ec513774667eeb64b049fa9b517756c1da
99889ef9126eddb7fee40e181c9832c734f8cef74736e2c577438300b468751c
92dfbdc903edcc919f426dc689d4461d354d15d77bf7f865db884f5de11d1253
bc228313eae03ff5c7bc97ce0a23ccdad9f13b4cbb3a28ca02091f47e2b3d4a4
5ee2ae88f934642edb29747732a0168ba8bcb981fcc6945a9a9a37b530ffb4b7
24020c0cae5f243c30eaee1fa84e2bf8899f1acb80a16491b7dce179d1ffe6a4
5e59ed49d3207a0f81bc242997bfd618a2d0030d9459da906f29fbcf8c33a43c
34dac3a6f2705ac5cb5a59a97147306b51ffe04d578983776521035c0e4af968
0bbec09890d31b79c26d2b175684426630f8b243c4a210cd919e54f35572bd80
f87c3775413c35a7612653bf6b3cb50982243f177f7b78dee43eff127f9192c9
d6db443b5dc954fc53cbe8ee722257964ebb57b0abc567ace323d0f7457d35c6

LockBit
c53184f2cdec4d9c07823fba4cb24b36eefb2913a3416b486b499472d7c0b27c

Lokibot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Mirai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Nanocore
bacc7d5cc9dcb523dae9abf1a89b62c2da635b1828fd415e331dc9cfb64e2be2
b2127a1c23239fa844001b35ae1687195da386b89ae1229c1e77363423bafe1d
f27e14f735a7d0136af67e5f10c99db1f3e09595f9af9a40467610aeec485e34
506126e0affa363603777ef8025c82796b2220b8507e528f65537d2f6117b21b
e4244d976d346b61d6083ba96af6dfc909d142749de241bc5095227a15fbd1d8
1bf046997ec1f9d22830748ba2a79a863a7a5df7efab83d07de00d6bcc9115e1
7d21b88e630659b8094d18b982c6f0f58f7434c8e921204a09916ed5248c5696

Neshta
5308c36e4d9c9750d098129a2aaebc22ea4c3cfa9c7ebb460c194906d54d00da
1e61eaa376720ceaa5b5ec931905270d06847c779e9110a8fa54f88b90b93114

Njrat
b71017702b183ec74c6255acc3a5351670fafc23e9bc8a97db0b0969b8d54e6a

Qbot
06a351583a82421c9f6b4a426706567444470b6fa213145d802e2bd217714b32

Raccoon
9fcd74ab400531e530fc20dd5cb71635dd8f8aac2deea7d749284d976ea0a629
70616f9e69227bdc705494fa961e3b30049d14c03893c36bb66851053287fea7
025db50d5ac582f6807b51a3ff12920176048999191833554526cd18056a5071
b38c70eb949dbfb10cc3a7dbe3a7130dada4ab34f08555a43210c89dac63bedf
14ef7f3bbea5ed37f68b621108c1af7eb95a6e884ea4419c6da2b7ed4b82b909
3a666dd93ae79da27b293f1b3ff04ea93ff8ceb54e44534bf5b80290e56bf1c9
d7bdf0a833b5be631a6381282554754806ba62b2f448182c4eb663b27b908582
23f85085e2f4e90405729f0b254902f8ad635ce5c73d87d8dcc0d8b20e3f4e56
acca11a2d0fc746a66b352eec2ebe5f4b48abd4d37f6ff433199f627312c65a0
609b78aa032cbfce2ebf74fbee9242327567dea566b11551bdee4fbef9d8aacc
ec1d707396eeb1d51be8cc72f1f1a2fb4e42d50baf0c4c568a43d7319244bf91
39780c4b8ee43052a5da080b4599292b8c5751ddee6c9842037b276b4cb1cea2
e58241089c879e30513e7b59537a8056138ec5417ea6b9d1bf0e1a522e255066
ffaa1ef0eb9c2a6d046d0be63ac5eb84ff761cabffd9902525f8a77dc9236908
40068fffc6429742326531a5a04cee32f57efb959fcc587953eebd693e610ff5
d550e81d0b0430f78b295dd361d1456974922e5018d7ac7886978acadf2f6364

RedLine
0346d79636501a3299b332a1338c4a21ace7957b5af5390865849faa04e40c66
461acfd0e2ac3e129234fdd5aee2b0d5f27b63398f63dd8d7d2e6223acdd42ce
edf264c3251453ada550dd24bc589408e00dee72fb7441cc7f062db6f29e477c
6f95d0f48b3805c0d556ca08d0508c4549e88cae97501b211f4157f1237a14ac
23f55715c252c4ee9f221bc6efdb00a116da886cc404ae65fc8abc3b78cce539
214a7a70ae8e3f5416b5560d1d73008076ddb0fd37c44235d1a38347a1186642
6f2fe8dcbccff2b36a21b6b2225c555ec7c4bdb037f4974ba193e7300653b461
4ca7e9323489a160f66dd215b817aad5825487ab69db19bd443bceb59970532d
5982183dbe4d3cb606a76af98ad2dc0608fe29051c613bf8cfdc7367118ae911
82312caab81ecc9a62fdf58470b41fcdb324616a6bc99747895eac045e46fd23
bc7c18db23ed539bc2f722c81b23da442981071e175eb5941dab5c52b1c9d169
1cca6686bbf4a122dc47f3254d966039128bf8e38cd0dbf7e6184ea35c635670
1a6f0d3cc3199df98797c474feea4c7e415dc1144f06e1fd04529fe363fe9010
0b5718e4165bddd89c54d2d71b3772777a5a4afb4cf1521eb87add717ae47af4
a2d60adc4182b937bb3b53aec810cdcc062ae5f8cd9e13284fb1ab31ac55148f
25d71a1e60b6b06d4029deba8a0f846851ad0f93f747aebef799444ca60fa11e
78f64544e30d99a30b6406c0a995f035e22433c751358e1144503337d1121614
665edf0941db286fa3194342a0b9057fef6fd85403880b88c021dfc7c237a4a3
1f9e76dd38415544387b94b6bb1cdf6d5df55e6bc2ce7f08600c37482e4be78d
b0f1a8208db9f11f164007a5b92ddd12baac6726d60e5839e419505646885e01
107b256d58ee0e1f462eab430dcd2109b52ff4d9f6ea981a17bfee239d2e3515
bfea7d15ec90630366d27478c7a205d4e866be3e036003d347d6433841f6feb0
8d4597e4476949f659a54cc2c5bf56723808759b39832c73a0a40314d7a50703
2b2572c7d0134eef12644af90d61302a50e7b550ffb4629666f8c566f34bed0d
40937fe9247e2201814da370189d7db909e79554e7007a6768b29d0f05299417
6b329a6c8796f39a8f0fe9eb06c8cff2b0558805b2729d2e9d3ec2ce53e72170
aa14435b035ec42a88d4f0572a065a43ad7c31e82973b2c8e186aa8d95f8f271
47a2479ff4d4b43a6c08f7ab6422b206a704f4cb1ffa3240174cd8a3390486be
98ec158d98823ede2b51b74e51a45a10255ecb839667c4efe17720182f63df64
3d89b018d416b604886d7d6c77a183b2fb3fd78156e78f1285208bcf249a5c74
244d9f9c8c187c82b3ae04335442b661c3563d165c22ca10154c1fd3f4aa1835
f673e7e5aa4a36e3ae2767ea14573c24e39ac05dc4976807f149e20e591fae8b
9400b2adff40951b31e4d496f3d01152e40d79a6b23ae1deb754f6dd0a632fa2

Remcos
3ce5b0553f1718aa5758fc34f4b91627bbe014aaada92ed297eb9482cbb06333
3b87e4ce782e2d6612b48c89a8fe965be84a3cb110db731845101a4243575789
95af4df2aea94c9836fe7a3c8fbb8ef28e2a377c4d9d5c9530825e0cb7a350d6
ad1945e7fd7b827c6e9d91b30d512c1f5b90ed7863d6af5ed11d772d0b5cee6d

Snake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